Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 461
Alerts This Week
Warning Icon 1 461

Gentoo: 200410-18 Regular Update: Ghostscript Symlink Vulnerability

gentoo
Calendar Grey October 20, 2004
Scroller Gentoo
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Adviso
Multiple scripts in the Ghostscript package are vulnerable to symlink attacks, potentially allowing a local user to overwrite arbitrary files with the rights of the user running th...

Summary

Gentoo Linux Security Advisory GLSA 200410-18 https://security.gentoo.org/ Severity: Normal Title: Ghostscript: Insecure temporary file use in multiple scripts Date: October 20, 2004 Bugs: #66357 ID: 200410-18

Synopsis ======= Multiple scripts in the Ghostscript package are vulnerable to symlink attacks, potentially allowing a local user to overwrite arbitrary files with the rights of the user running the script.
Background ========= Ghostscript is a software package providing an interpreter for the PostScript language and the PDF file format. It also provides output drivers for various file formats and printers.
Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / ...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory gentoo software update file overwrite ghostscript symlink attack normal severity

Resolution

References

Availability

style>.gentoo_availability{display:block;}

Concerns

Topics%20covered

Topics Covered

security advisory gentoo software update file overwrite ghostscript symlink attack normal severity

Synopsis

Background

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Impact

Workaround